CVE-2024-29008 Apache CloudStack: The extraconfig feature can be abused to load hypervisor resources on a VM instance

A problem has been identified in the CloudStack additional VM configuration extraconfig feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an already deployed VM instance, to configure additional VM configuration even when the feature is not...

CVE-2022-23087

The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These include the insertion of IP and TCP checksums, insertion of an Ethernet VLAN header, and TCP segmentation offload "TSO". The e1000 device model uses an on-stack buffer to generat...

Stack overflow

The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These include the insertion of IP and TCP checksums, insertion of an Ethernet VLAN header, and TCP segmentation offload "TSO". The e1000 device model uses an on-stack buffer to generat...

CVE-2022-23087

The CVE-2022-23087 issue affects the e1000 device emulation in bhyve on FreeBSD, where the device model uses an on‑stack buffer to modify transmitted packets. When checksum offload is requested, a guest‑provided checksum offset is accepted without validation for certain packet types, enabling a m...

Intel Ethernet Products 代码问题漏洞

Intel Ethernet Products is a networking product from Intel Corporation USA. A security vulnerability exists in Intel Ethernet Products Network Adapters prior to version 27.3, which arises from an uncontrolled search path and can be exploited by an authenticated attacker to potentially enable...

SureBackup Ping Test Wrong Docker IP

Challenge A SureBackup Job's ping and application tests attempt to interact with an unexpected IP address of a Virtual Machine running Docker. Cause The SureBackup Job's recovery verification tests use the IP addresses reported to the VMware Environment by VMware Tools. Solution To control which ...

Researchers Uncover Covert Attack Campaign Targeting Military Contractors

A new covert attack campaign singled out multiple military and weapons contractor companies with spear-phishing emails to trigger a multi-stage infection process designed to deploy an unknown payload on compromised machines. The highly-targeted intrusions, dubbed STEEPMAVERICK by Securonix, also...

The vulnerability of the API interface of Realtek USB network adapter drivers allows a hacker to trigger a service failure.

The vulnerability of the API interface of Realtek USB network adapter drivers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2021-33059

Improper input validation in the IntelR Administrative Tools for IntelR Network Adapters driver for Windows before version 1.4.0.15, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-33058

Improper access control in the installer IntelRAdministrative Tools for IntelR Network Adaptersfor Windowsbefore version 1.4.0.21 may allow an unauthenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33059

Improper input validation in the IntelR Administrative Tools for IntelR Network Adapters driver for Windows before version 1.4.0.15, may allow a privileged user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in the installer IntelRAdministrative Tools for IntelR Network Adaptersfor Windowsbefore version 1.4.0.21 may allow an unauthenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33059

CVE-2021-33059 affects Intel’s Administrative Tools for Intel Network Adapters driver for Windows. The issue is improper input validation in the Administrative Tools component, which could allow a local, privileged user to escalate privileges. Affected versions are prior to 1.4.0.15; remediation ...

CVE-2021-33059

Improper input validation in the IntelR Administrative Tools for IntelR Network Adapters driver for Windows before version 1.4.0.15, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-33058

Improper access control in the installer IntelRAdministrative Tools for IntelR Network Adaptersfor Windowsbefore version 1.4.0.21 may allow an unauthenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33058

CVE-2021-33058 involves improper access control in the installer for Intel(R) Administrative Tools used with Intel(R) Network Adapters on Windows, prior to version 1.4.0.21. The vulnerability could allow an unauthenticated user with local access to potentially escalate privileges. The issue affec...

Linux Administrative Tools for Intel Network Adapters 安全漏洞

Linux Administrative Tools for Intel Network Adapters is a Linux-based administrative tool for Intel network adapters from Intel Corporation USA. A security vulnerability exists in the NetConfig UI administrative interface, where an attacker can execute PHP code as root via a remote HTTP request,...

Intel Ethernet Adapters 800 输入验证错误漏洞

Intel Ethernet Adapters 800 is an Ethernet adapter from IntelR Corporation. The Intel Ethernet Adapters 800 suffers from an input validation error vulnerability that stems from incorrect input validation in the IntelR Management Tool prior to version 1.4.0.15 of the IntelR Network Adapters for...

The vulnerability of the “AES_UnWRAP” function in Realtek network adapters allows a hacker to execute arbitrary code.

The vulnerability of the “AESUnWRAP” function in Realtek network adapters is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the memcpy function in Realtek network adapters allows a hacker to execute arbitrary code.

The vulnerability of the memcpy function in Realtek network adapters arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...